Skip to content
OpenAdvisories
Critical ICSA-15-125-01B 7 CVEs

Hospira LifeCare PCA Infusion System Vulnerabilities

Published Feb 5, 2015 · Updated Jun 6, 2025 · Revision 2

Vendor: Hospira Product: LifeCare PCA Infusion System

Vulnerabilities 7

  • High 7.6
    CVE-2014-5406

    Hospira LifeCare PCA Infusion System

    The Hospira LifeCare PCA Infusion System before 7.0 does not validate network traffic associated with sending a (1) drug library, (2) software update, or (3) configuration change, which allows remote attackers to modify settings or medication data via packets…

    Hospira LifeCare PCA Infusion System
  • Unscored —
    CVE-2015-1011

    Hospira LifeCare PCA Infusion System before 7.0 has hardcoded credentials, which makes it easier for remote attackers t…

  • Unscored —
    CVE-2015-1012

    Wireless keys are stored in plain text on version 5 of the Hospira LifeCare PCA Infusion System. According to Hospira, …

    Hospira LifeCare PCA Infusion System
  • Unscored —
    CVE-2015-3459

    The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for roo…

  • Unscored —
    CVE-2015-3955

    Stack-based buffer overflow in Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allow…

  • Unscored —
    CVE-2015-3957

    Hospira LifeCare PCA Infusion System before 7.0 stores private keys and certificates, which has unspecified impact and …

  • Unscored —
    CVE-2015-3958

    Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to cause a d…

Revision history

  1. #2

    Advisory converted into a CSAF

  2. #1

    Initial Publication

References